#thn

共收录 1290 条相关情报。

← 返回所有主题
威胁情报2026-10-08 发布INFO

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations th

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Atta

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of steal

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zha

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxe

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for sev

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes informa

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access t

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artific

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow

The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, A

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credentia

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

CVE-2026-21589

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products th

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

What Is Agentic Pentesting? What It Proves, and Where It Stops.

If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: poin

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced a

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have be

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising p

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened,

历史摘要 · 未重新核验 · The Hacker News